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CLAIMS 

1 . A method of securely executing on a computer system an application for receiving, 
from a user of the computer system, at least one response to at least one question of an 
examination, the computer system comprising an input device and a display device for 
displaying content to the user, the method comprising acts of: 

(A) executing the application on the computer system, comprising displaying an 
area on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more 
of the questions into the displayed area; and 

(B) prohibiting the computer system from accessing any unauthorized content 
during execution of the application and from displaying any authorized content to the user 
during execution of the application. 

2. The method of claim 1 , wherein act (A) further comprises an act of displaying the at 
least one question of the examination on the display device. 

3 . The method of claim 1 , wherein prior to performance of act (A), one or more 
unauthorized processes are executing on the computer system, wherein act (B) comprises an 
act of terminating the one or more unauthorized processes prior to performing act (A). 

4. The method of claim 1, wherein act (B) comprises an act of (1) configuring the 
application such that unauthorized content cannot be accessed by the application. 

5. The method of claim 4, wherein act (B)(1) comprises an act of configuring the 
application such that unauthorized processes cannot be initiated by the application. 

6. The method of claim 1, wherein act (B) comprises an act of (1) prior to executing act 
(A), disabling any functions on the computer system capable of performing at least one of the 
following: accessing unauthorized content and displaying unauthorized content to a user of 
the computer system. 

7. The method of claim 6, wherein act (B)(1) comprises an act of disabling any functions 
on the computer system that are capable of initiating imauthorized processes on the computer 
system. 
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8. The method of claim 6, wherein act (B)(1) comprises an act of configuring one or 
more programming hooks of the computer system. 

9. The method of claim 1, wherein act (B) comprises an act of (1) during execution of the 
5 application, terminating any detected unauthorized processes. 

10. The method of claim 9, further comprising: 

(D) recording each detection of an unauthorized process. 

10 11. The method of claim 9, wherein act (B)(1) comprises acts of (a) detecting any 

processes executing on the computer system during execution of the application, (b) for each 
detected process, determining if the detected process is authorized to execute on the computer 
system during execution of the application, and (c) for each detected process, if the detected 
process is unauthorized, terminating the detected process. 

15 

12. The method of claim 1 1, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and act (B)(1)(a) comprises an act 
of periodically accessing the registry on the computer system at predefined intervals to 
ascertain the processes currently executing on the computer system. 

20 

1 3 . The method of claim 12, further comprising an act of: 
(C) managing a list of unauthorized processes, 

wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of unauthorized processes, and wherein act (B)(1)(c) comprises, for 
25 each detected process, terminating the detected process if the detected process is on the list. 

1 4. The method of claim 1 2, further comprising an act of: 

(C) managing a list of processes authorized to be executed on the computer system, 
wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
30 detected process to the list of authorized processes, and wherein act (B)(1)(c) comprises, for 

each detected process, terminating the detected process if the detected process is not on the 

list. 

15. An apparatus for securely executing on a computer system an application for 

35 receiving, from a user of the computer system, at least one response to at least one question of 
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an examination, the computer system comprising an input device and a display device for 
displaying content to the user, the apparatus comprising: 

an application execution component to execute the application on the computer 
system, comprising display logic to display an area on the display device in which the user 
can enter a response to at least one question of the examination, and input logic to enable the 
user to use the input device to input a response for one or more of the questions into the 
displayed area; and 

a security component to prohibit the computer system from accessing any 
unauthorized content during execution of the application and from displaying any authorized 
content to the user during execution of the application. 

1 6. The apparatus of claim 1 5, wherein the display logic is operative to display the at least 
one question of the examination on the display device. 

17. The apparatus of claim 1 5, wherein the security component comprises process- 
terminating logic to terminate any unauthorized processes executing on the computer system 
prior to execution of the application. 

18. The apparatus of claim 1 5, wherein the security component comprises application- 
configuring logic to configure the application such that unauthorized content cannot be 
accessed by the application. 

1 9. The apparatus of claim 1 8, wherein the application-configuring logic is operative to 
configure the application such that unauthorized processes cannot be initiated by the 
application. 

20. The apparatus of claim 1 5, wherein the security component comprises function- 
disabling logic to disable, prior to execution of the application, any functions on the computer 
system capable of performing at least one of the following: accessing unauthorized content 
and displaying unauthorized content to a user of the computer system. 



2 1 . The apparatus of claim 20, wherein the fimction-disabling logic is operative to disable 
any fiinctions on the computer system that are capable of initiating processes on the computer 
system. 
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22. The apparatus of claim 20, wherein the function-disabling logic is operative to 
configure one or more programming hooks of the computer system. 



23 . The apparatus of claim 15, wherein the security component comprises process- 

5 terminating logic to terminate any detected unauthorized processes during execution of the 
application. 

24. The apparatus of claim 23, wherein the security component comprises recording logic 
to record each detection of an unauthorized process. 

10 

25. The apparatus of claim 23, wherein the process-terminating logic comprises detection 
logic to detect any processes executing on the computer system during execution of the 
application, determining logic to determine, for each detected process, if the detected process 
is authorized to execute on the computer system during execution of the application, and 

15 terminating logic to terminate, for each detected process, the detected process if the detected 
process is unauthorized. 

26. The apparatus of claim 25, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and wherein the detection logic is 

20 operative to periodically access the registry on the computer system at predefined intervals to 
ascertain the processes currently executing on the computer system. 

27. The apparatus of claim 25, wherein the security component further comprises list- 
managing logic to maintain a list of unauthorized processes not authorized to be executed on 

25 the computer system, the determining logic is operative to compare, for each detected process, 
the detected process to the list of unauthorized processes, and the terminating logic is 
operative to terminate, for each detected process, the detected process if the detected process 
is on the list. 

30 28. The apparatus of claim 25, wherein the security component further comprises list- 
managing logic to maintain a list of processes authorized to be executed on the computer 
system, the determining logic is operative to compare, for each detected process, the detected 
process to the list of authorized processes, and the terminating logic is operative to terminate, 
for each detected process, the detected process if the detected process is not on the list. 

35 
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29. An apparatus for securely executing on a computer system an application for 
receiving, from a user of the computer system, at least one response to at least one question of 
an examination, the computer system comprising an input device and a display device for 
displaying content to the user, the apparatus comprising: 

5 means for executing the application on the computer system, comprising displaying an 

area on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more 
of the questions into the displayed area; and 

means for prohibiting the computer system from accessing any unauthorized content 
10 during execution of the application and from displaying any authorized content to the user 
during execution of the application. 

30. The apparatus of claim 29, wherein the means for executing the application further 
comprises means for displaying the at least one question of the examination on the display 

15 device. 



3 1 . The apparatus of claim 29, wherein the means for prohibiting comprises means for 
terminating any unauthorized processes executing on the computer system prior to execution 
of the application. 

20 

32. The apparatus of claim 29, wherein the means for prohibiting comprises means for 
configuring the application such that unauthorized content cannot be accessed by the 
application. 

25 33 . The apparatus of claim 32, wherein the means for prohibiting comprises means for 
configuring the application such that unauthorized processes carmot be initiated by the 
application. 



34. The apparatus of claim 29, wherein the means for prohibiting comprises means for 
30 disabling, prior to execution of the application, any fiinctions on the computer system capable 
of performing at least one of the following: accessing unauthorized content and displaying 
unauthorized content to a user of the computer system. 



35 



35. The apparatus of claim 34, wherein the means for prohibiting comprises means for 
disabling any fiinctions on the computer system that are capable of initiating unauthorized 
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processes on the computer system. 

36. The apparatus of claim 34, wherein the means for prohibiting comprises means for 
configuring one or more programming hooks of the computer system. 

37. The apparatus of claim 29, wherein the means for prohibiting comprises means for 
terminating, during execution of the application, any detected unauthorized processes. 

38. The apparatus of claim 34, further comprising: 

means for recording each detection of an unauthorized process. 

39. The apparatus of claim 34, wherein the means for prohibiting comprises means for 
detecting any processes executing on the computer system during execution of the application, 
means for determining, for each detected process, if the detected process is authorized to 
execute on the computer system during execution of the application, and means for 
terminating each detected process determined to be unauthorized. 

40. The apparatus of claim 39, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and the means for prohibiting 
comprises means for periodically accessing the registry on the computer system at predefined 
intervals to ascertain the processes currently executing on the computer system. 

4 1 . The apparatus of claim 39, further comprising : 
means for managing a list of unauthorized processes, 

wherein the means for prohibiting comprises means for comparing, for each detected 
process, the detected process to the list of unauthorized processes, and wherein the means for 
prohibiting comprises terminating each detected process that is on the list. 

42. The apparatus of claim 39, further comprising : 

means for managing a list of processes authorized to be executed on the computer 

system, 

wherein the means for prohibiting comprises means for comparing, for each detected 
process, the detected process to the list of authorized processes, and wherein the means for 
prohibiting comprises means for terminating each detected process that is not on the list. 
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43. A computer program product, comprising: 
a computer-readable medium; and 

computer-readable signals stored on the computer-readable medium that define 
instructions that, as a result of being executed by a computer, instruct the computer to perform 
a process of a process of securely executing on a computer system an application for 
receiving, from a user of the computer system, at least one response to at least one question of 
an examination, the computer system comprising an input device and a display device for 
displaying content to the user, the process comprising acts of 

(A) executing the application on the computer system, comprising displaying an 
area on the display device in which the user can enter a response to at least one question of the 
examination, and enabling the user to use the input device to input a response for one or more 
of the questions into the displayed area; and 

(B) prohibiting the computer system from accessing any unauthorized content 
during execution of the application and from displaying any authorized content to the user 
during execution of the application. 

44. A method of securely executing an application on a computer system, the method 
comprising acts of 

(A) executing the application on the computer system; and 

(B) prohibiting the computer system from accessing any unauthorized content 
during execution of the application and from displaying any authorized content to a user of the 
computer system during execution of the application. 

45. The method of claim 44, wherein prior to performance of act (A), one or more 
unauthorized processes are executing on the computer system, and wherein act (B) comprises 
an act of terminating the one or more unauthorized processes prior to performing act (A). 

46. The method of claim 44, wherein act (B) comprises an act of (1) configuring the 
application such that unauthorized content cannot be accessed by the application. 

47. The method of claim 46, wherein act (B)(1) comprises an act of configuring the 
application such that unauthorized processes carmot be initiated by the application. 

48. The method of claim 44, wherein act (B) comprises an act of (1) prior to executing act 
(A), disabling any ftmctions on the computer system capable of performing at least one of the 
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following: accessing imauthorized content or displaying unauthorized content to a user of the 
computer system. 

49. The method of claim 48, wherein act (B)(1) comprises an act of disabling any 

5 functions on the computer system that are capable of initiating processes on the computer 
system. 

50. The method of claim 48, wherein act (B)(1) comprises an act of configxiring one or 
more programming hooks of the computer system. 

10 

5 1 . The method of claim 44, wherein act (B) comprises an act of (1 ) during execution of 
the application, terminating any detected vinauthorized processes. 

52. The method of claim 5 1 , further comprising: (D) recording each detection of an 
15 unauthorized process. 

53. The method of claim 51, wherein act (B)(1) comprises acts of (a) detecting any 
processes executing on the computer system during execution of the application, (b) for each 
detected process, determining if the detected process is authorized to execute on the computer 

20 system during execution of the application, and (c) for each detected process, if the detected 
process is unauthorized, terminating the detected process. 

54. The method of claim 53, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and act (B)(1)(a) comprises an act 

25 of periodically accessing the registry on the computer system at predefined intervals to 
ascertain the processes currently executing on the computer system. 

55. The method of claim 53, further comprising an act of: 

(C) managing a list of unauthorized processes not authorized to be executed on the 
30 computer system, 

wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of unauthorized processes, and wherein act (B)(1)(c) comprises, for 
each detected process, terminating the detected process if the detected process is on the list. 
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56. The method of claim 53, further comprising an act of: 

(C) managing a list of processes authorized to be executed on the computer system, 
wherein act (B)(1)(b) comprises an act of, for each detected process, comparing the 
detected process to the list of authorized processes, and wherein act (B)(1)(c) comprises, for 
each detected process, terminating the detected process if the detected process is not on the 
list. 

57. The method of claim 44, wherein the application is for receiving, from a user of the 
computer system, at least one response to at least one question of an examination, the 
computer system comprises an input device and a display device for displaying content to the 
user, and act (A) comprises acts of displaying an area on the display device in which the user 
can enter a response to the at least one question of the examination, and enabling the user to 
use the input device to input a response for one or more of the questions into the displayed 
area. 

58. The method of claim 57, wherein act (A) further comprises an act of displaying the at 
least one question of the examination on the display device. 

59. An apparatus for securely executing an application on a computer system, the 
apparatus comprising: 

an application-executing component to execute the application on the computer 
system; and 

a security component to prohibit the computer system from accessing any 
unauthorized content during execution of the application and from displaying any authorized 
content to a user of the computer system during execution of the application. 

60. The apparatus of claim 59, wherein the security component comprises process- 
terminating logic to terminate any imauthorized processes executing on the computer system 
prior to execution of the application. 

6 1 . The apparatus of claim 59, the security component comprises application-configuring 
logic to configure the application such that unauthorized content cannot be accessed by the 
application. 
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62. The apparatus of claim 61 , wherein the application-configuring logic is operative to 
configure the application such that unauthorized processes cannot be initiated by the 
application. 

5 63. The apparatus of claim 59, wherein the security component comprises function- 
disabling logic to disable, prior to execution of the application, any functions on the computer 
system capable of performing at least one of the following: accessing unauthorized content or 
displaying unauthorized content to a user of the computer system. 

10 64. The apparatus of claim 63, wherein the function-disabling logic is operative to disable 
any functions on the computer system that are capable of initiating processes on the computer 
system. 

65. The apparatus of claim 63, wherein the function-disabling logic is operative to 
15 configure one or more programming hooks of the computer system. 

66. The apparatus of claim 59, wherein the security component comprises process- 
terminating logic to terminate any detected unauthorized processes during execution of the 
application. 

20 

67. The apparatus of claim 66, wherein the security component comprises recording logic 
to record each detection of an unauthorized process. 

68. The apparatus of claim 66, wherein the process-terminating logic comprises detection 
25 logic to detect any processes executing on the computer system during execution of the 

application, determining logic to determine, for each detected process, if the detected process 
is authorized to execute on the computer system during execution of the application, and 
terminating logic to terminate, for each detected process, the detected process if the detected 
process is unauthorized. 

30 

69. The apparatus of claim 68, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and wherein the detection logic is 
operative to periodically access the registry on the computer system at predefined intervals to 
ascertain the processes currently executing on the computer system. 

35 
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70. The apparatus of claim 68, wherein the security component further comprises list- 
managing logic to maintain a list of unauthorized processes not authorized to be executed on 
the computer system the determining logic is operative to compare, for each detected process, 
the detected process to the list of unauthorized processes, and the terminating logic is 

5 operative to terminate, for each detected process, the detected process if the detected process 
is on the list. 

71 . The apparatus of claim 68, wherein the security component further comprises list- 
managing logic to maintain a list of processes authorized to be executed on the computer 

10 system, the determining logic is operative to compare, for each detected process, the detected 
process to the list of authorized processes, and the terminating logic is operative to terminate, 
for each detected process, the detected process if the detected process is not on the list. 

72. The apparatus of claim 59, wherein the application is for receiving, from a user of the 
15 computer system, at least one response to at least one question of an examination, and the 

computer system comprises an input device and a display device for displaying content to the 
user, and wherein the application-executing component comprises display logic to display an 
area on the display device in which the user can enter a response to the at least one question of 
the examination, and comprises input-enabling logic to enable the user to use the input device 
20 to input a response for one or more of the questions into the displayed area. 

73. The apparatus of claim 72, wherein the display logic is operative to display the at least 
one question of the examination on the display device. 

25 74. An apparatus for securely executing an application on a computer system, the 
apparatus comprising: 

means for executing the application on the computer system; and 
means for prohibiting the computer system from accessing any unauthorized content 
during execution of the application and from displaying any authorized content to a user of the 
30 computer system during execution of the application. 

75. The apparatus of claim 74, wherein the means for executing the application further 
comprises means for displaying the at least one question of the examination on the display 
device. 



35 
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76. The apparatus of claim 74, wherein the means for prohibiting comprises means for 
terminating any unauthorized processes executing on the computer system prior to execution 
of the apphcation. 

5 77. The apparatus of claim 74, wherein the means for prohibiting comprises means for 
configuring the application such that unauthorized content cannot be accessed by the 
application. 

78. The apparatus of claim 77, wherein the means for prohibiting comprises means for 
10 configuring the application such that unauthorized processes cannot be initiated by the 

application. 

79. The apparatus of claim 74, wherein the means for prohibiting comprises means for 
disabling, prior to execution of the application, any functions on the computer system capable 

15 of performing at least one of the following: accessing unauthorized content and displaying 
unauthorized content to a user of the computer system. 

80. The apparatus of claim 79, wherein the means for prohibiting comprises means for 
disabling any functions on the computer system that are capable of initiating unauthorized 

20 processes on the computer system. 

81. The apparatus of claim 79, wherein the means for prohibiting comprises means for 
configuring one or more programming hooks of the computer system. 

25 82. The apparatus of claim 74, wherein the means for prohibiting comprises means for 
terminating, during execution of the application, any detected unauthorized processes. 

83. The apparatus of claim 79, further comprising: 

means for recording each detection of an unauthorized process. 

30 

84. The apparatus of claim 79, wherein the means for prohibiting comprises means for 
detecting any processes executing on the computer system during execution of the application, 
means for determining, for each detected process, if the detected process is authorized to 
execute on the computer system during execution of the application, and means for 
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terminating each detected process determined to be unauthorized. 

85. The apparatus of claim 84, wherein the computer system comprises a registry that lists 
all processes currently executing on the computer system, and the means for prohibiting 

5 comprises means for periodically accessing the registry on the computer system at predefined 
intervals to ascertain the processes currently executing on the computer system. 

86. The apparatus of claim 84, further comprising : 
means for managing a list of unauthorized processes, 

10 wherein the means for prohibiting comprises means for comparing, for each detected 

process, the detected process to the list of unauthorized processes, and wherein the means for 
prohibiting comprises terminating each detected process that is on the list. 

87. The apparatus of claim 84, further comprising : 

15 means for managing a list of processes authorized to be executed on the computer 

system, 

wherein the means for prohibiting comprises means for comparing, for each detected 
process, the detected process to the list of authorized processes, and wherein the means for 
prohibiting comprises means for terminating each detected process that is not on the list. 

20 

88. The apparatus of claim 74, wherein the application is for receiving, from a user of the 
computer system, at least one response to at least one question of an examination, the 
computer system comprises an input device and a display device for displaying content to the 
user, and 

25 wherein the means for executing the application comprises means for displaying an 

area on the display device in which the user can enter a response to the at least one question of 
the examination, and means for enabling the user to use the input device to input a response 
for one or more of the questions into the displayed area. 

30 89. The apparatus of claim 88, wherein the means for executing the application comprises 
means for displaying the at least one question of the examination on the display device. 

90. A computer program product, comprising: 
a computer-readable medivim; and 
35 computer-readable signals stored on the computer-readable medium that define 
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instructions that, as a result of being executed by a computer, instruct the computer to perform 
a process of securely executing an application on a computer system, the process comprising 
acts of: 

(A) executing the application on the computer system; and 

(B) prohibiting the computer system from accessing any unauthorized content 
during execution of the application and from displaying any authorized content to a user of the 
computer system during execution of the application. 



